4975 Commits

Author SHA1 Message Date
Nathaniel Wesley Filardo
af9abf95c9 cqueues: lua-5.3, 5.4 variants
Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2025-10-25 08:46:34 +03:00
Nathaniel Wesley Filardo
1e60fd049a luaossl: lua-5.3, 5.4 variants
Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2025-10-25 08:46:14 +03:00
Josef Schlehofer
f182a567aa python-hatch-requirements-txt: bump to 0.4.1
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-22 12:54:31 +02:00
Tianling Shen
23c3d208e8 golang: Update to 1.25.3
go1.25.2 (released 2025-10-07) includes security fixes to the
archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem,
net/http, net/mail, net/textproto, and net/url packages, as well as
bug fixes to the compiler, the runtime, and the context, debug/pe,
net/http, os, and sync/atomic packages.

go1.25.3 (released 2025-10-13) includes fixes to the crypto/x509
package.

Changelog: https://go.dev/doc/devel/release#go1.25.minor

Fixes:
- CVE-2025-47912
- CVE-2025-58183
- CVE-2025-58185
- CVE-2025-58186
- CVE-2025-58187
- CVE-2025-58188
- CVE-2025-58189
- CVE-2025-61723
- CVE-2025-61724
- CVE-2025-61725

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-10-20 22:56:05 +08:00
Michael Heimpold
dd9c6ecd31 php8: update to 8.4.13
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.13

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-10-16 22:41:37 +02:00
Luiz Angelo Daros de Luca
89cbbf6f26 ruby: update to 3.4.6
Ruby 3.4.6 is a routine update that includes bug fixes.

Changelog: https://github.com/ruby/ruby/releases/tag/v3_4_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-10-14 13:31:13 +02:00
Etienne Champetier
759f303897 lua-cjson: bump minimum cmake version to 3.10
Starting cmake 4.0, anything under 3.5 produces an error, see
https://cmake.org/cmake/help/latest/command/cmake_minimum_required.html#policy-version

Use a patch instead of CMAKE_OPTIONS so we don't forget to remove this hack.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2025-10-09 15:12:20 -04:00
Jianhui Zhao
33ecb64165 lua-eco: update to 3.13.0
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.13.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-10-06 12:07:09 -03:00
George Sapkin
d856cb45e3 python-trove-classifiers: bump to 2025.9.11.17
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
2025-10-03 12:11:54 +02:00
Wei-Ting Yang
c6ba0ce292 python-urllib3: update to 2.5.0
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-10-02 08:17:48 +02:00
Wei-Ting Yang
7289cb0119 python-packaging: update to 25.0
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-10-02 08:17:48 +02:00
Josef Schlehofer
4d521dfbeb python-hatchling: update to version 1.27.0
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-10-01 08:35:00 +02:00
George Sapkin
6408f9ef6e python-atomicwrites: drop package
- archived upstream
- drop confirmed by Python maintainer
- last local commit:
  commit: d5ac6e103e
  Author: Jeffery To <jeffery.to@gmail.com>
  Date:   Mon, 24 Jul 2023 22:46:41 -0700

  python-atomicwrites: Update to 1.4.1

Link: https://github.com/openwrt/packages/pull/26400#issuecomment-2848164601
Signed-off-by: George Sapkin <george@sapk.in>
2025-09-23 13:11:55 +02:00
Alexandru Ardelean
5e1d07b162 numpy: bump to version 2.3.3
Bump the version number to 2.3.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-09-23 12:03:36 +03:00
Fabrice Fontaine
76ff404bc3 python-cryptography: fix PKG_CPE_ID
cryptography_project:cryptography has been deprecated in favour of
cryptography.io:cryptography:
https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2025-09-20 23:13:41 +08:00
Tianling Shen
4c8c41c023 rust: Update to 1.90.0
Release note: https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-19 20:24:26 +08:00
Luiz Angelo Daros de Luca
4410c80283 ruby: update to 3.4.5
Ruby 3.4.0 is a major release that introduces several changes:
- Adds `it` block parameter reference
- Switches default parser to Prism
- Implements Happy Eyeballs Version 2 in the socket library
- Improves YJIT
- Adds Modular GC
- And more (see changelog for full details)

Subsequent minor releases include:
- 3.4.1: fixes version description
- 3.4.2: routine bugfix release
- 3.4.3: routine bugfix release
- 3.4.4: routine bugfix release (Linux-specific)
- 3.4.5: routine bugfix release, adds GCC 15 support

Packaging changes:
- (NEW) ruby-repl_type_completor (packaging the repl_type_completor gem)
- Refreshed package dependencies
- Updated `ruby_missingfiles` (detects unpacked files) to use `apk`
- Refactored `ruby_find_pkgsdeps` (detects inter-package dependencies)
  to use the Ruby parser (Prism) instead of heuristic string matching

Changelog: https://www.ruby-lang.org/en/news/2024/12/25/ruby-3-4-0-released/
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-09-18 22:17:26 +03:00
Sandro Jäckel
e4b9245fcf golang: update to 1.25.1
Fixes: CVE-2025-47910
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.25.1%20label%3ACherryPickApproved
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2025-09-16 22:04:00 +08:00
Jianhui Zhao
7c9184315b lua-eco: update to 3.12.0
A new module `shared` added since this version.

changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.12.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-09-15 20:10:05 -03:00
Tianling Shen
a5c3fd1fee rust: add loongarch64 and powerpc to supported targets
Also removed i686 as OpenWrt replaces it with i386 in $(ARCH).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-12 14:46:43 +08:00
Aleksey Vasilenko
06bc7784ce erlang: update to 28.0.3
- Takeover maintainership
- Enable parallel build
- Depend from libstdcpp only on JIT-enabled platforms (x86_64 and aarch64)
- Add SCTP support (off by default)
- Remove OTP-internal versions and rely on package versions for sub-packages
- Remove obsolete configure vars
- Move out sasl from erlang package into separate erlang-sasl
- Add more sub-packages
    - erlang-diameter
    - erlang-eldap
    - erlang-ftp
    - erlang-odbc
    - erlang-parsetools
    - erlang-tftp
- Rename erlang-os_mon to erlang-os-mon
- Clean-up descriptions text
- Disable MIPS16 again to fix mips* targets

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2025-09-12 14:46:13 +08:00
Michael Heimpold
69e9d5c560 php8: update to 8.4.12
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.12

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-09-06 20:11:29 +02:00
Luiz Angelo Daros de Luca
59880e81a6 ruby: update to 3.3.9
3.3.9 release includes the following security fix of default gems:

- CVE-2025-24294: Possible Denial of Service in resolv gem

And the following fixes for build issues:

- GCC 15.1
- Visual Studio 2022 Version 17.14

3.3.7 and 3.3.8 are routine update that includes minor bug fixes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2025-09-01 19:46:45 +03:00
Wei-Ting Yang
e236bede74 django-restframework: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:django-rest-framework:django_rest_framework

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-29 11:56:26 +03:00
Rosen Penev
d9fee08632 python3: fix host uuid and ncurses
pkgconfig doesn't work correct for these two packages. Just readd the
proper paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-24 20:28:15 +03:00
George Sapkin
bfd3058770 golang: bump to 1.25.0
Fixes: CVE-2025-47907
Link: https://go.dev/doc/go1.25
Signed-off-by: George Sapkin <george@sapk.in>
2025-08-24 22:25:17 +08:00
Aleksey Vasilenko
10862df850 rust: update to 1.89.0
- switch source archive to tar.xz to save space and bandwidth
- refresh a patch

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2025-08-23 13:28:18 +03:00
Michael Heimpold
465ad70688 php8: update to 8.4.11
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.11

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-08-22 23:02:23 +02:00
Tianling Shen
84cb850b7f rust: read build path from {HOST_}MAKE_PATH
Allow set build path by `{HOST_}MAKE_PATH`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-21 17:00:09 +08:00
Tianling Shen
1000e99185 rust: introduce RUST_{HOST,PKG}_LOCKED flag
Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.

This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-21 17:00:09 +08:00
Austin Lane
f2d141912f python-pyelftools: Update to v0.32
- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <vidplace7@gmail.com>
2025-08-19 07:48:45 +02:00
Nathaniel Wesley Filardo
99393c9ef8 lua-argparse: bump to luarocks' 0.7.1
Bump lua-argparse to the luarocks argparse 0.7.1 release.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
2025-08-17 19:09:11 +03:00
Wei-Ting Yang
6d9d0d2bf8 python-certifi: update to 2025.8.3
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-15 23:24:03 -03:00
Wei-Ting Yang
dc6724fca5 python-certifi: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-15 23:24:03 -03:00
Wei-Ting Yang
23646be59e python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-08-14 15:48:28 +02:00
Josef Schlehofer
3686cbe417 python3: update to version 3.11.13
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-08-14 15:48:04 +02:00
Alexandru Ardelean
12738a8eec django: allow test.sh only for python3-django package
No idea how this worked before.
But the '/usr/bin/django-admin' is available only for python3-django

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
52620adeed python-requests: bump to version 2.32.4
This change updates the Python requests package to version 2.32.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
2c2c7a9de4 numpy: bump to version 2.3.2
This change bumps numpy to 2.3.2

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
eecc9a97db django-restframework: bump to version 3.16.1
This change updates django-restframework to 3.16.1

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-08-14 15:10:10 +03:00
Rosen Penev
7648e25568 perl-file-rsyncp: update to 0.76
Fix compilation with GCC15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-14 11:59:36 +08:00
Fabian Lipken
79c293e91c python-pycares: bump to 4.10.0
python-pycares: bump from version 4.8.0 to 4.10.0

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2025-08-14 11:58:43 +08:00
Michael Heimpold
331c6bc7ca php8: link PCRE2 JIT usage to actual library configuration
libpcre2's JIT support is controlled with a compile-time flag.
When PHP is compiled against it (external libpcre2 - not PHP's bundled
version) as in our use-case, then it tries to auto-detect whether
JIT support is enalbed or not - but this is done based on a guess
when cross-compiling.

So instead of guessing, we need to tell the actual OpenWrt configuration
of libpcre2 to PHP.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-08-09 22:29:01 +02:00
Richard Muzik
e09ffebce1 python-twisted: Update to 25.5.0
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].

Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.

[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
2025-08-08 13:50:28 +02:00
Rosen Penev
d791c150fc perl-xml-parser: fix host expat paths
expat is installed in host, not hostpkg.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2025-08-06 21:58:25 +08:00
Tianling Shen
c8ad05854d golang: disable build for powerpc64
e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.

1. https://github.com/golang/go/issues/19074

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-04 12:50:19 +08:00
Vladimir Ermakov
7c289ead14 python: adjust with glibc and libcrypt-compat
Fix #27012

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2025-07-30 14:43:39 +02:00
Richard Muzik
63b3e10116 python-incremental: Update to 24.7.2
To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
2025-07-30 11:51:29 +02:00
Jianhui Zhao
f931ddb99f lua-eco: update to 3.11.0
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.11.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2025-07-25 18:09:28 +08:00
Michael Heimpold
ae7cb49d6f php8: update to 8.4.10
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.10

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2025-07-21 23:10:18 +02:00